I am getting an error while filtering a json file. Previously, I was using filebeat to send data directly to logstash, but now I am using kafka between filebeat and logstash. So the output is not the same:
Previously, the input of my logstash was a part of an xml.
And now I am getting a json file:
inside this json file, I can find the part of xml I was using before (message in yellow)
How can I change this part of my logstash to will be able to filter the xml file like I was doing before.
the first part of my filter was:
I tried to use something like that but I am getting errors:
Thank you for your help